About quist

I currently have a PA-2050 acting as a firewall to a collection of private networks (with private IP addresses). Several of these "inside" hosts do need access to external IP addresses/hosts. Specificially to ftp information out and in. Is it possible for the PA to serve as a ftp proxy, similar to the ftp-proxy service available on OpenBSD? The external interface of the PA does indeed have a public IP address. Thanks in advance for any help or ideas. Russell Sutherland Supervisor Network Development University of Toronto ... View more

I am trying to use tftp to upload/export the configuration file to an OpenBSD tftp server which is on the same LAN as the PA box. The address of the PA is 192.168.2.1 and the OpenBSD server 192.168.3.1 The file transfer process seems to be timing out at the ACK phase (server -> PA). Here's the command: admin@fs> tftp export configuration source-ip 192.168.2.1 remote-port 69 from running-config.xml to 192.168.3.1 And the CLI output: mode set to octetConnected to 192.168.3.1 (192.168.3.1), port 69 putting /opt/pancfg/mgmt/saved-configs/running-config.xml to 192.168.3.1:running-config.xml [octet] Transfer timed out. Here's the tcpdump from the server end: tcpdump: listening on bnx0, link-type EN10MB 15:08:09.425788 192.168.2.1.60530 > 192.168.3.1.69: [udp sum ok] 27 WRQ "running-config.xml" (DF) (ttl 64, id 0, len 55) 15:08:09.427420 192.168.3.1.27411 > 192.168.2.1.60530: [udp sum ok] udp 4 (ttl 64, id 4994, len 32) 15:08:14.431952 192.168.2.1.60530 > 192.168.3.1.69: [udp sum ok] 27 WRQ "running-config.xml" (DF) (ttl 64, id 0, len 55) 15:08:14.433542 192.168.3.1.18764 > 192.168.2.1.60530: [udp sum ok] udp 4 (ttl 64, id 34391, len 32) 15:08:14.434888 192.168.3.1.27411 > 192.168.2.1.60530: [udp sum ok] udp 4 (ttl 64, id 6242, len 32) 15:08:19.434963 192.168.3.1.18764 > 192.168.2.1.60530: [udp sum ok] udp 4 (ttl 64, id 42027, len 32) 15:08:19.444958 192.168.3.1.27411 > 192.168.2.1.60530: [udp sum ok] udp 4 (ttl 64, id 7569, len 32)15:08:19.451921 192.168.2.1.60530 > 192.168.3.1.69: [udp sum ok] 27 WRQ "running-config.xml" (DF) (ttl 64, id 0, len 55) 15:08:19.453516 192.168.3.1.27360 > 192.168.2.1.60530: [udp sum ok] udp 4 (ttl 64, id 49047, len 32) 15:08:24.445032 192.168.3.1.18764 > 192.168.2.1.60530: [udp sum ok] udp 4 (ttl 64, id 36935, len 32) 15:08:24.455032 192.168.3.1.27411 > 192.168.2.1.60530: [udp sum ok] udp 4 (ttl 64, id 39363, len 32) 15:08:24.455046 192.168.3.1.27360 > 192.168.2.1.60530: [udp sum ok] udp 4 (ttl 64, id 32590, len 32) Any ideas? The equivalent scp command does work. ... View more

I have an OSPF virtual router configuration with two interfaces. One interface (int1)  is part of the default area (0.0.0.0) whereas the other  one (int2)  is not. There is a static default which points to the next hop on the non-OSPF interface network. I want to announce or generate a default route into the OSPF area and have clicked the "Allow Redist Default Route" button. However the default does NOT get announced to the OSPF cloud. Do I have to create a Redistribution Profile as well to make this "standard" operation occur? Russell ... View more